Hi Dennis, thanks a lot for your prompt response. That's very helpful.
Am Mon, Jan 26, 2026 at 09:43:07AM +0100 schrieb Dennis van Dok: > Control: tags -1 + wontfix Cool. Happy that I was wrong with my suspicion. > Op 25-01-2026 om 10:33 schreef Andreas Tille: > > > > * relies on the Globus Toolkit (GT4), which has reached "End of Life" > > and is no longer maintained. > > While that may be true, there are still people who monitor the software for > security reasons. Very good to know! > > * orphaned upstream so does not receive security patches, posing > > a risk to authentication workflows. > > How was this conclusion reached? I know upstream maintainer and I know that > security patches *will* be provided if issues come up. Sorry about my false statement in this aspect. > > * uses old X.509 GSI standards that are often incompatible with modern > > OpenSSL versions and have been replaced by OAuth2/OIDC tokens. > > This is indeed legacy software, but for the moment still used in some > scientific communities while a transition to tokens is underway. Removing it > from Debian is fine, but then we will still have to provide those > communities with Debian compatible packages through other channels. If its relevant for Debian 14 just lets keep it. > > * no function outside of legacy scientific grid computing. For standard > > servers or desktops, it is useless > > I was not aware that this was a requirement for inclusion ;-) Surely this is not a requirement. It was my (broken way) to say "well, it seems it is outdated in the scientific context and has no other use (at least to me knowledge). > > * removal would reduces technical debt and prevents potential > > dependency conflicts during future Debian upgrades. > > That is highly unlikely, unless the entirity of the Globus Toolkit is also > on the block. I think the fate of this package is tied to the GT. Thank you for your insight. > > * there are no (build-)dependencies to other packages > > * There are no votes in popcon > > Which I can understand as most site admins do not enable this for their > servers. That's surely the weak part of popcon. In case you have some contact and the local policy might permit running popcon it would be great if you could advertise this. > > > > https://qa.debian.org/popcon-graph.php?packages=lcas-lcmaps-gt4-interface&show_installed=on&show_vote=on&want_legend=on&want_ticks=on&from_date=&to_date=&hlght_date=&date_fmt=%25Y-%25m&beenhere=1 > > * There seems to be no active maintainer > > Not true ;-) I'm happy to realise this. I'm very sorry about the wrong assumtion - I'm probably way to used to the situation that I get no answer at all. > > This package was highlighted in the Bug of the Day[1] initiative, which > > aims to introduce newcomers to manageable tasks and guide them through > > the workflow to solve them. The focus of this initiative is on migrating > > packages to Salsa, as it's a great way to help newcomers become familiar > > with a consistent Git-based workflow. > > I'll check it out, thanks. Since I have some experience in doing this I could offer to do this as "punishment" for my wrong assumptions. If you tell me whether you have some prefered team (maybe Debian Science or plain Debian team) I could create a repository with the content of past releases. Kind regards Andreas. -- https://fam-tille.de
